TYAN S5550, Manual

Page: 112 / 142

http://www.tyan.com
112
Remove ‘UEFI CA’ DB
Device Guard ready system must not list ‘Microsoft UEFI CA’ Certificate in
Authorized Signature (db).
Press ‘Yes’ to proceed ‘No’ to cancel.
Restore DB defaults
Restore DB variable to factory defaults.
Press ‘Yes’ to proceed ‘No’ to cancel.
Platform Key (PK)
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI EFI/COFF Image (SHA256)
Key source: Factory, External, Mixed
Update / Append
Key Exchange Keys
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI EFI/COFF Image (SHA256)
Key source: Factory, External, Mixed
Update / Append
Authorized Signatures
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI EFI/COFF Image (SHA256)
Key source: Factory, External, Mixed
Update / Append
Forbidden Signatures
Enroll Factory Defaults or load certificates from a file: